Remote Code Execution in docuForm GmbH Client v11.11c

Publication date: 2026-07-09

Last updated on: 2026-07-10

Assigner: MITRE

Description

An issue in docuForm GmbH Client v.11.11c allows a remote attacker to execute arbitrary code via the file upload and report.php component

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-09

Last Modified

2026-07-10

Generated

2026-07-11

AI Q&A

2026-07-10

EPSS Evaluated

N/A

NVD

CVE-2026-51924

Affected Vendors & Products

Vendor	Product	Version / Range
docuform_gmbh	client	11.11c

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability exists in docuForm GmbH Client version 11.11c and allows a remote attacker to execute arbitrary code by exploiting the file upload functionality and the report.php component.

Impact Analysis

An attacker exploiting this vulnerability could run arbitrary code on the affected system remotely, potentially leading to unauthorized access, data theft, system compromise, or disruption of services.

Hi! I’m here to help you understand CVE-2026-51924. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70